CN105205385A - Business operation authorization method and system - Google Patents
Business operation authorization method and system Download PDFInfo
- Publication number
- CN105205385A CN105205385A CN201510571622.4A CN201510571622A CN105205385A CN 105205385 A CN105205385 A CN 105205385A CN 201510571622 A CN201510571622 A CN 201510571622A CN 105205385 A CN105205385 A CN 105205385A
- Authority
- CN
- China
- Prior art keywords
- equipment
- business
- business operation
- note
- authorization
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/44—Program or device authentication
Abstract
An embodiment of the invention discloses a business operation authorization method and system. The method comprises steps as follows: first equipment receives an authorization request, sent by second equipment, for a current business operation, wherein the authorization request contains operation information about the business operation; the first equipment displays the operation information about the business operation, so that a user of the first equipment can make operation selection according to the operation information; the first equipment sends an authorization response of the business operation to the second equipment, the authorization response contains the operation selection, and accordingly, the second equipment performs the business operation according to the operation selection. The business operation authorization method and system can ensure that the business operation is finished under the condition that a client knows and permits the business operation, transparent business operation is realized, and meanwhile, the infringement risk caused by business operation behavior is reduced.
Description
Technical field
The present invention relates to financial field, be specifically related to a kind of business operation authorization method and system.
Background technology
In financial sector, business personnel when for client's transacting business, because whole process lacks the participation of client, so business personnel has an opportunity to carry out abuse to the account of client, for the fund of bank and client brings certain risk.
In order to reduce the risk that this business operation brings, traditional method is the business operation process utilizing monitoring technique record traffic person, as adopted the first-class equipment of shooting.But this cannot be avoided the risk of legal generic operation.So-called legal generic operation risk refers to, the business operation that business personnel performs is completely legal in software systems, but is not but the business that client's actual needs does, and in other words, business personnel has done the business operation damaging the benefit of client in the unwitting situation of client.
Summary of the invention
In order to reduce the risk of infringement that business operation behavior brings, the invention provides a kind of business operation authorization method and system.
The invention provides a kind of business operation authorization method, described method comprises:
First equipment receives the authorization requests to current business operation that the second equipment sends, and described authorization requests comprises the operation information of described business operation;
Described first equipment shows the operation information of described business operation, selects so that the user of described first equipment makes operation according to described operation information;
Described first equipment sends the authorization response of described business operation to described second equipment, and described authorization response comprises described operation and selects, and makes described second equipment select to perform described business operation according to described operation.
Preferably, after described second equipment selects to perform described business operation according to described operation, described method also comprises:
Described second equipment produces the operation note of described business operation, and whether described operation note comprises authorizes mark;
Described operation note is sent to the 3rd equipment by described second equipment, so that the 3rd equipment produces the first operation form according to described operation note.
Preferably, described method also comprises:
The operation note of the arbitrary business operation of described second equipment record, described operation note comprises the record carrying and whether authorize mark;
Described operation note is sent to the 3rd equipment by described second equipment, so that the 3rd equipment produces the second operation form according to described operation note;
Described second operation form compares with the need mandate business operation type preset by described 3rd equipment, to determine whether there is illegal traffic operation, described illegal traffic is operating as and belongs to described and need authorize business operation type, but does not carry the business operation of whether authorizing mark.
Preferably, described method also comprises:
Described second equipment sends AKU to described first equipment, completes upgrading to make described first equipment.
Present invention also offers a kind of business operation authoring system, described system comprises the first equipment and the second equipment,
Described second equipment, for sending the authorization requests to current business operation to described first equipment, described authorization requests comprises the operation information of described business operation;
Described first equipment, for receiving authorization requests, and shows the operation information of described business operation, selects so that the user of described first equipment makes operation according to described operation information; And the authorization response of described business operation is sent to described second equipment, described authorization response comprises described operation and selects;
Described second equipment, for selecting to perform described business operation according to described operation.
Preferably, described system also comprises the 3rd equipment;
Described second equipment, also for generation of the operation note of described business operation, whether described operation note comprises authorizes mark; And described operation note is sent to described 3rd equipment;
Described 3rd equipment, for producing the first operation form according to described operation note.
Preferably, described system also comprises the 3rd equipment;
Described second equipment, for recording the operation note of arbitrary business operation, whether described operation note comprises authorizes mark; And described operation note is sent to described 3rd equipment;
Described 3rd equipment, for producing the second operation form according to described operation note; And described second operation form is compared with the need mandate business operation type preset, to determine whether there is illegal traffic operation, described illegal traffic is operating as and belongs to described and need authorize business operation type, but does not carry the business operation of whether authorizing mark.
Preferably, described second equipment, also for sending AKU to described first equipment, completes upgrading to make described first equipment.
In the present invention, first the first equipment receives the authorization requests to current business operation that the second equipment sends, and described authorization requests comprises the operation information of described business operation.Secondly, described first equipment shows the operation information of described business operation, selects so that the user of described first equipment makes operation according to described operation information.Again, described first equipment sends the authorization response of described business operation to described second equipment, and described authorization response comprises described operation and selects, and makes described second equipment select to perform described business operation according to described operation.Compared with prior art, the present embodiment can ensure that business operation completes when client knows the inside story and allow, and realizes the transparent of business operation.Reduce the risk of infringement that business operation behavior brings simultaneously.
Accompanying drawing explanation
In order to be illustrated more clearly in the technical scheme in the embodiment of the present application, below the accompanying drawing used required in describing embodiment is briefly described, apparently, accompanying drawing in the following describes is only some embodiments of the application, for those of ordinary skill in the art, under the prerequisite not paying creative work, other accompanying drawing can also be obtained according to these accompanying drawings.
A kind of business operation authorization method process flow diagram that Fig. 1 provides for the embodiment of the present invention;
A kind of business operation authoring system structural representation that Fig. 2 provides for the embodiment of the present invention.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present application, be clearly and completely described the technical scheme in the embodiment of the present application, obviously, described embodiment is only some embodiments of the present application, instead of whole embodiments.Based on the embodiment in the application, those of ordinary skill in the art are not making the every other embodiment obtained under creative work prerequisite, all belong to the scope of the application's protection.
With reference to figure 1, be a kind of business operation authorization method process flow diagram that the embodiment of the present invention provides, described method comprises:
S101: the first equipment receives the authorization requests to current business operation that the second equipment sends, and described authorization requests comprises the operation information of described business operation.
In the embodiment of the present invention, the first equipment, the second equipment can be all computing machines.In financial field, the automatic teller machine that described first equipment can use for business personnel, the computing machine that the second equipment can use for client.Wherein, the computing machine that business personnel uses automatic teller machine and client use passes through default communication protocol and is connected with interface protocol etc. and communicates.
In practical application, when business personnel uses automatic teller machine to perform to need the business operation of client authorization, the computing machine that automatic teller machine can initiatively use to client sends the authorization requests to current business operation.Wherein, described authorization requests can comprise the operation information of described business operation.
S102: described first equipment shows the operation information of described business operation, selects so that the user of described first equipment makes operation according to described operation information.
In the embodiment of the present invention, after described first equipment receives the operation information of described business operation, described operation information is shown.The user of described first equipment can make operation according to the operation operation information of display and select.
In practical application, after the computing machine of client's use receives the authorization requests from automatic teller machine, the operation information in described authorization requests is shown.Client, by the operation information of display, carries out operation and selects, and the display as the computing machine of client's use can show " whether allowing to transfer accounts 50,000 yuan ", and client can select mouse to click the selection of "Yes" or "No" complete operation.
S103: described first equipment sends the authorization response of described business operation to described second equipment, described authorization response comprises described operation and selects, and makes described second equipment select to perform described business operation according to described operation.
In the embodiment of the present invention, after described first equipment receives the operation selection of user, the authorization response comprising described operation selection is sent to described second equipment.After described second equipment receives described authorization response, select to perform described business operation according to the operation of the user of described first equipment.Concrete, when the user of described first equipment selects to authorize described second equipment to perform described business operation, described second equipment can continue to perform described business operation.But when the user of described first equipment selects not authorize described second equipment to perform described business operation, described second equipment needs to stop performing described business operation.
In practical application, the business personnel of bank is when using automatic teller machine execution to need the business operation of client authorization, and the mandate only obtaining client normally could perform described business operation.Can ensure that business personnel does the business operation performed like this is all that client knows and the business operation allowed, and achieves the transparent execution of business operation.
In order to record the authorization conditions of user to business operation of the first equipment, the present embodiment can also comprise:
First, described second equipment produces the operation note of described business operation, and whether described operation note comprises authorizes mark.Secondly, described operation note is sent to the 3rd equipment by described second equipment, so that the 3rd equipment produces the first operation form according to described operation note.Wherein, described 3rd equipment can be server.
In practical application, automatic teller machine, after the authorization response receiving the computing machine transmission that client uses, records the authorization conditions of this client to described business operation, and produces operation note.In addition, automatic teller machine also needs the operation note of generation to be sent to server so that electronic archive.Concrete, server, after receiving described operation note, can produce form according to described operation note, the use so that subsequent banks is checked account etc.
In addition, in order to the legitimate rights and interests preventing business personnel from invading client further, the embodiment of the present invention can also proceed as follows:
First, the operation note of the arbitrary business operation of described second equipment record, whether described operation note comprises authorizes mark.Secondly, described operation note is sent to the 3rd equipment by described second equipment, so that the 3rd equipment produces the second operation form according to described operation note.Again, described second operation form compares with the need mandate business operation type preset by described 3rd equipment, to determine whether there is illegal traffic operation, described illegal traffic is operating as and belongs to described and need authorize business operation type, but does not carry the business operation of whether authorizing mark.
In practical application, each business operation of its process of automatic teller machine record, and produce operation note.After described operation note is sent to server by described automatic teller machine, server produces form according to described operation note.Server, according to the need mandate business operation type preset, judges whether there is illegal business operation in this form.That is, whether the business personnel of operation automatic teller machine performs to belong to and need authorize business operation type, but without the business operation of client authorization.
In addition, described second equipment can also send AKU to described first equipment, completes upgrading to make described first equipment.
In the present embodiment, upgrading unified by the computing machine that automatic teller machine can control client's use.
In the embodiment of the present invention, first, the first equipment receives the authorization requests to current business operation that the second equipment sends, and described authorization requests comprises the operation information of described business operation.Secondly, described first equipment shows the operation information of described business operation, selects so that the user of described first equipment makes operation according to described operation information.Again, described first equipment sends the authorization response of described business operation to described second equipment, and described authorization response comprises described operation and selects, and makes described second equipment select to perform described business operation according to described operation.Compared with prior art, the present embodiment can ensure that business operation completes when client knows the inside story and allow, and realizes the transparent of business operation.Reduce the risk of infringement that business operation behavior brings simultaneously.
With reference to figure 2, be the business operation authoring system structural representation that the embodiment of the present invention provides, described system comprises the first equipment 201 and the second equipment 202;
Described second equipment 202, for sending the authorization requests to current business operation to described first equipment, described authorization requests comprises the operation information of described business operation;
Described first equipment 201, for receiving authorization requests, and shows the operation information of described business operation, selects so that the user of described first equipment makes operation according to described operation information; And the authorization response of described business operation is sent to described second equipment, described authorization response comprises described operation and selects;
Described second equipment 202, for selecting to perform described business operation according to described operation.
In addition, described system can also comprise the 3rd equipment;
Described second equipment, also for generation of the operation note of described business operation, whether described operation note comprises authorizes mark; And described operation note is sent to described 3rd equipment;
Described 3rd equipment, for producing the first operation form according to described operation note.
In another kind of implementation, described system can also comprise the 3rd equipment;
Described second equipment, for recording the operation note of arbitrary business operation, whether described operation note comprises authorizes mark; And described operation note is sent to described 3rd equipment;
Described 3rd equipment, for producing the second operation form according to described operation note; And described second operation form is compared with the need mandate business operation type preset, to determine whether there is illegal traffic operation, described illegal traffic is operating as and belongs to described and need authorize business operation type, but does not carry the business operation of whether authorizing mark.
In addition, described second equipment, also for sending AKU to described first equipment, completes upgrading to make described first equipment.
In the embodiment of the present invention, described second equipment, for sending the authorization requests to current business operation to described first equipment, described authorization requests comprises the operation information of described business operation; Described first equipment, for receiving authorization requests, and shows the operation information of described business operation, selects so that the user of described first equipment makes operation according to described operation information; And the authorization response of described business operation is sent to described second equipment, described authorization response comprises described operation and selects; Described second equipment, for selecting to perform described business operation according to described operation.Compared with prior art, the present embodiment can ensure that business operation completes when client knows the inside story and allow, and realizes the transparent of business operation, reduces the risk of infringement that business operation behavior brings simultaneously.
For device embodiment, because it corresponds essentially to embodiment of the method, so relevant part illustrates see the part of embodiment of the method.Device embodiment described above is only schematic, the wherein said unit illustrated as separating component or can may not be and physically separates, parts as unit display can be or may not be physical location, namely can be positioned at a place, or also can be distributed in multiple network element.Some or all of module wherein can be selected according to the actual needs to realize the object of the present embodiment scheme.Those of ordinary skill in the art, when not paying creative work, are namely appreciated that and implement.
It should be noted that, in this article, the such as relational terms of first and second grades and so on is only used for an entity or operation to separate with another entity or operational zone, and not necessarily requires or imply the relation that there is any this reality between these entities or operation or sequentially.And, term " comprises ", " comprising " or its any other variant are intended to contain comprising of nonexcludability, thus make to comprise the process of a series of key element, method, article or equipment and not only comprise those key elements, but also comprise other key elements clearly do not listed, or also comprise by the intrinsic key element of this process, method, article or equipment.When not more restrictions, the key element limited by statement " comprising ... ", and be not precluded within process, method, article or the equipment comprising described key element and also there is other identical element.
The business operation authorization method provided the embodiment of the present invention above and system are described in detail, apply specific case herein to set forth principle of the present invention and embodiment, the explanation of above embodiment just understands method of the present invention and core concept thereof for helping; Meanwhile, for one of ordinary skill in the art, according to thought of the present invention, all will change in specific embodiments and applications, in sum, this description should not be construed as limitation of the present invention.
Claims (8)
1. a business operation authorization method, is characterized in that, described method comprises:
First equipment receives the authorization requests to current business operation that the second equipment sends, and described authorization requests comprises the operation information of described business operation;
Described first equipment shows the operation information of described business operation, selects so that the user of described first equipment makes operation according to described operation information;
Described first equipment sends the authorization response of described business operation to described second equipment, and described authorization response comprises described operation and selects, and makes described second equipment select to perform described business operation according to described operation.
2. method according to claim 1, is characterized in that, after described second equipment selects to perform described business operation according to described operation, described method also comprises:
Described second equipment produces the operation note of described business operation, and whether described operation note comprises authorizes mark;
Described operation note is sent to the 3rd equipment by described second equipment, so that the 3rd equipment produces the first operation form according to described operation note.
3. method according to claim 1, is characterized in that, described method also comprises:
The operation note of the arbitrary business operation of described second equipment record, described operation note comprises the record carrying and whether authorize mark;
Described operation note is sent to the 3rd equipment by described second equipment, so that the 3rd equipment produces the second operation form according to described operation note;
Described second operation form compares with the need mandate business operation type preset by described 3rd equipment, to determine whether there is illegal traffic operation, described illegal traffic is operating as and belongs to described and need authorize business operation type, but does not carry the business operation of whether authorizing mark.
4. method according to claim 1, is characterized in that, described method also comprises:
Described second equipment sends AKU to described first equipment, completes upgrading to make described first equipment.
5. a business operation authoring system, is characterized in that, described system comprises the first equipment and the second equipment,
Described second equipment, for sending the authorization requests to current business operation to described first equipment, described authorization requests comprises the operation information of described business operation;
Described first equipment, for receiving authorization requests, and shows the operation information of described business operation, selects so that the user of described first equipment makes operation according to described operation information; And the authorization response of described business operation is sent to described second equipment, described authorization response comprises described operation and selects;
Described second equipment, for selecting to perform described business operation according to described operation.
6. system according to claim 5, is characterized in that, described system also comprises the 3rd equipment;
Described second equipment, also for generation of the operation note of described business operation, whether described operation note comprises authorizes mark; And described operation note is sent to described 3rd equipment;
Described 3rd equipment, for producing the first operation form according to described operation note.
7. system according to claim 5, is characterized in that, described system also comprises the 3rd equipment;
Described second equipment, for recording the operation note of arbitrary business operation, whether described operation note comprises authorizes mark; And described operation note is sent to described 3rd equipment;
Described 3rd equipment, for producing the second operation form according to described operation note; And described second operation form is compared with the need mandate business operation type preset, to determine whether there is illegal traffic operation, described illegal traffic is operating as and belongs to described and need authorize business operation type, but does not carry the business operation of whether authorizing mark.
8. system according to claim 5, is characterized in that,
Described second equipment, also for sending AKU to described first equipment, completes upgrading to make described first equipment.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510571622.4A CN105205385B (en) | 2015-09-09 | 2015-09-09 | A kind of business operation authorization method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510571622.4A CN105205385B (en) | 2015-09-09 | 2015-09-09 | A kind of business operation authorization method and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105205385A true CN105205385A (en) | 2015-12-30 |
| CN105205385B CN105205385B (en) | 2018-07-03 |
Family
ID=54953060
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510571622.4A Active CN105205385B (en) | 2015-09-09 | 2015-09-09 | A kind of business operation authorization method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105205385B (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107240020A (en) * | 2016-03-28 | 2017-10-10 | 平安科技（深圳）有限公司 | Insurance accepts the risk monitoring and control method and apparatus of information |
| CN111056019A (en) * | 2019-12-26 | 2020-04-24 | 陕西宝成航空仪表有限责任公司 | Emergency evacuation signal system for airplane |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20040158700A1 (en) * | 2001-05-17 | 2004-08-12 | Fujitsu Limited | Register setting method and semiconductor device |
| CN101383067A (en) * | 2008-10-17 | 2009-03-11 | 中国建设银行股份有限公司 | Bank counter transaction process implementing method, transaction system and customer terminal |
| CN101408969A (en) * | 2008-11-13 | 2009-04-15 | 中国工商银行股份有限公司 | Server and system for monitoring bank risk data |
| CN102306365A (en) * | 2010-07-06 | 2012-01-04 | 福建升腾资讯有限公司 | Method for financial transaction of bank counter |
-
2015
- 2015-09-09 CN CN201510571622.4A patent/CN105205385B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20040158700A1 (en) * | 2001-05-17 | 2004-08-12 | Fujitsu Limited | Register setting method and semiconductor device |
| CN101383067A (en) * | 2008-10-17 | 2009-03-11 | 中国建设银行股份有限公司 | Bank counter transaction process implementing method, transaction system and customer terminal |
| CN101408969A (en) * | 2008-11-13 | 2009-04-15 | 中国工商银行股份有限公司 | Server and system for monitoring bank risk data |
| CN102306365A (en) * | 2010-07-06 | 2012-01-04 | 福建升腾资讯有限公司 | Method for financial transaction of bank counter |
Non-Patent Citations (1)
| Title |
|---|
| 王强: ""商业银行自建RA系统开发"", 《中国优秀博硕士学位论文全文数据库（硕士）经济与管理科学辑》 * |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107240020A (en) * | 2016-03-28 | 2017-10-10 | 平安科技（深圳）有限公司 | Insurance accepts the risk monitoring and control method and apparatus of information |
| CN111056019A (en) * | 2019-12-26 | 2020-04-24 | 陕西宝成航空仪表有限责任公司 | Emergency evacuation signal system for airplane |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105205385B (en) | 2018-07-03 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109447811B (en) | Method, accounting node and medium for inquiring transaction information in blockchain network | |
| CN109189962B (en) | License service implementation system based on block chain | |
| JP2020113315A (en) | Distributed, decentralized data aggregation | |
| CN101764819B (en) | For detecting the method and system of man-in-the-browser attacks | |
| EP3554034B1 (en) | Method and device for authenticating login | |
| CN110245941B (en) | Transaction risk identification method and device | |
| CN103369022B (en) | Method and system for communication with memory device | |
| CA3095150A1 (en) | Generating and linking private transaction identifiers to distributed data repositories | |
| US11568401B2 (en) | Digital payment system | |
| CN107211007A (en) | Selective access to resource is provided | |
| CN105075223B (en) | Tracking in a computing environment using | |
| US9769159B2 (en) | Cookie optimization | |
| CN110084600B (en) | Processing and verifying method, device, equipment and medium for resolution transaction request | |
| CN106559389A (en) | A kind of Service Source issue, call method, device, system and cloud service platform | |
| CN110210863A (en) | Block chain method for secure transactions, device, electronic equipment and storage medium | |
| JP2022006164A (en) | Method, device, electronic device, computer-readable storage media and computer program for processing user request | |
| CN108537520B (en) | Method and device for accessing third-party payment transaction | |
| US20220067125A1 (en) | Method for distributing certificate of right to use digital content, and computer program stored in medium in order to carry out method | |
| CN107396362A (en) | A kind of method and apparatus for being used to carry out user equipment wireless connection pre-authorization | |
| CN105205385A (en) | Business operation authorization method and system | |
| CN106209735A (en) | A kind of information processing method, device and Electronic Health Record system | |
| CN109903046A (en) | User data management and device based on block chain | |
| CN110580652B (en) | On-chain asset mortgage financing system and method through on-chain digital currency settlement | |
| CN113269639A (en) | Business processing method, device, equipment and medium based on block chain intelligent contract | |
| CN105897931B (en) | Network exempts from method of flow control and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |